opendkim crashes on invalid sender address

Bug #937533 reported by Christian Schlittchen
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
opendkim (Ubuntu)
Fix Released
High
Scott Kitterman
Oneiric
Fix Released
High
Scott Kitterman

Bug Description

opendkim crashes, probably on a malformed sender address:

Feb 18 16:01:55 gabriel-2 opendkim[972]: 1FEF4123A68: external host blade05.zfn.uni-bremen.de attempted to send as t-online..de
Feb 18 16:01:55 gabriel-2 postfix/cleanup[6445]: warning: milter inet:localhost:8891: can't read SMFIC_BODYEOB reply packet header: Success
Feb 18 16:01:55 gabriel-2 postfix/cleanup[6445]: 1FEF4123A68: milter-reject: END-OF-MESSAGE from blade05.zfn.uni-bremen.de[134.102.20.129]: 4.7.1 Service unavailable - try again later; from=<email address hidden> to=<email address hidden> proto=ESMTP helo=<blade05.zfn.uni-bremen.de>

Afterwards opendkim is gone:

Feb 18 16:01:55 gabriel-2 postfix/smtpd[2678]: warning: connect to Milter service inet:localhost:8891: Connection refused

My suspicion is that the two consecutive dots in 't-online..de' (see first line) cause the crash.

OS is Ubuntu 11.10 with updates applied. Opendkim is version 2.4.2+dfsg-0ubuntu1.

TEST CASE: Install the updated packages and verify correct operation from logs. Check logs for an instance of sequential dots in an email address. If opendkim didn't crash, this is fixed.

Revision history for this message
Scott Kitterman (kitterman) wrote :

I've passed the bug upstream. We'll see what they have to say.

Revision history for this message
Scott Kitterman (kitterman) wrote :

What's the output of opendkim -V on that system?

Revision history for this message
Scott Kitterman (kitterman) wrote :

Also a copy of your /etc/opendkim.conf and /etc/default/opendkim would be helpful.

Revision history for this message
Scott Kitterman (kitterman) wrote :

Nevermind on additional data. Upstream reports they've identified the issue and it's already fixed in the next version, 2.4.3.

That version is already in the development release of Ubuntu. I'll work with upstream and see how best we can get this fix into 11.10.

Changed in opendkim (Ubuntu):
status: New → Triaged
importance: Undecided → High
assignee: nobody → Scott Kitterman (kitterman)
milestone: none → oneiric-updates
Changed in opendkim (Ubuntu Oneiric):
status: New → Triaged
importance: Undecided → High
assignee: nobody → Scott Kitterman (kitterman)
milestone: none → oneiric-updates
Changed in opendkim (Ubuntu):
milestone: oneiric-updates → none
status: Triaged → Fix Released
Revision history for this message
Scott Kitterman (kitterman) wrote :

Uploaded the upstream change that was done for 2.4.3 in precise as a candidate post-release change for oneiric.

Changed in opendkim (Ubuntu Oneiric):
assignee: Scott Kitterman (kitterman) → nobody
status: Triaged → In Progress
assignee: nobody → Scott Kitterman (kitterman)
description: updated
Revision history for this message
Clint Byrum (clint-fewbar) wrote : Please test proposed package

Hello Christian, or anyone else affected,

Accepted opendkim into oneiric-proposed. The package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Changed in opendkim (Ubuntu Oneiric):
status: In Progress → Fix Committed
tags: added: verification-needed
Revision history for this message
Christian Schlittchen (schlittchen) wrote :

Thanks a lot for the quick response. The patch looks good so far and a few quick tests were successful. I will keep it running on one of our outgoing servers for a few days, then update the rest of the farm.

Revision history for this message
Clint Byrum (clint-fewbar) wrote :

Great Christian. I'll consider that a "verification done". If you find any problems in the next 6 days, please report them immediately, as absent any reports of regressions, this will proceed to oneiric-updates on the 29th.

tags: added: verification-done
removed: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package opendkim - 2.4.2+dfsg-0ubuntu1.1

---------------
opendkim (2.4.2+dfsg-0ubuntu1.1) oneiric-proposed; urgency=low

  * Add changes from upstream (fix already in 2.4.3/precise) to
    opendkim/opendkim-dns.c to fix crash with email addresses that have
    consecutive dots (<email address hidden>) (LP: #937533)
 -- Scott Kitterman <email address hidden> Tue, 21 Feb 2012 15:04:37 -0500

Changed in opendkim (Ubuntu Oneiric):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.